Correct T07: reuse-surface is live and stale; state-hub was mostly a false alarm

Checking each image reference's liveness separated the two cases the first pass
treated alike.

reuse-surface is a live Deployment on gitea, pinned to a 2026-07-07 commit and 22
commits behind main. Its CI moved to forgejo at 21:25 that same day, three hours
after the pinned commit, and has published :latest and :main-<short> there ever
since. Producer migrated, consumer did not.

state-hub's Deployment is already on forgejo with the current tag scheme. Its
only gitea reference is a completed one-shot alembic-init Job that does not
re-run on its own, so "unable to run its schema migration" was wrong. Residual
risk is a chart template recreating it.

No repository rename occurred — this is a registry migration in which one
consumer was left behind.

An image reference is not a dependency until something can act on it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

DECISIONS.md

@@ -90,9 +90,30 @@ This fails in the most inconvenient way available. Running pods survive
 decommission because their images are already pulled locally — **so nothing
 breaks on the day**. The failure arrives at the next restart, reschedule, node
 reboot or scale-up, as `ImagePullBackOff`, at a moment chosen by circumstance
-rather than by us. And one of the two is **State Hub's own migration job** — the
-service this entire project exists to retire in an orderly way, unable to run its
-schema migration.
+rather than by us.
+
+**Corrected 2026-08-20, same day.** The first version of this entry treated both
+references as equally live and said State Hub would be "unable to run its schema
+migration". That overstated it, and the two cases are not alike:
+
+- **`reuse-surface` is the real one.** A *live Deployment* pulling
+  `gitea.coulomb.social/coulomb/reuse-surface:e3ae22e` — a commit from
+  **2026-07-07 18:25**, now **22 commits** behind main (2026-07-30). Its CI
+  moved to `REGISTRY: forgejo.coulomb.social` at **21:25 the same day**, three
+  hours later, and has been publishing `:latest` and `:main-<short>` there ever
+  since. The producer migrated; the consumer never did.
+- **`state-hub` is largely a false alarm.** Its *Deployment* already runs
+  `forgejo.coulomb.social/coulomb/state-hub:main-d8808bf` — correctly migrated,
+  current tag scheme. The only gitea reference is a **completed one-shot Job**
+  (`state-hub-alembic-init`, 1 succeeded, completions 1, created 2026-07-06)
+  that does not re-run on its own. It matters only if something recreates it
+  from a chart template still carrying the old image, which is worth fixing but
+  is not an outage waiting to happen.
+
+The correction is recorded rather than edited away because the *method* produced
+it: enumerating workload image references found both, and only checking each
+one's liveness separated a live staleness from a historical artifact. **An image
+reference is not a dependency until something can act on it.**
 
 `forgejo.coulomb.social` already runs on railiance01, so the destination exists
 and the work is retag, push, update manifest. Routed to `railiance-platform`.